CVE-2020-8620
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
Published:Aug 20, 2020
Last Modified:Nov 21, 2024
EPS:Aug 21, 2020
EPSS Score:0.0682
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Canonical
Product
Ubuntu Linux
Canonical
Ubuntu Linux
Vendor
Isc
Product
Bind
Isc
Bind
Vendor
Netapp
Product
Steelstore Cloud Integrated Storage
Netapp
Steelstore Cloud Integrated Storage
Vendor
Opensuse
Product
Leap
Opensuse
Leap
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
